From c70b19aad245fb1ed39bf8c264d991555f4c5a58 Mon Sep 17 00:00:00 2001 From: Jun Fang Date: Wed, 25 Nov 2015 11:13:50 +0800 Subject: Fix invalid buffer length set in CFX_WideString::UTF16LE_Encode() BUG=pdfium:275 R=tsepez@chromium.org Review URL: https://codereview.chromium.org/1443603002 . --- fpdfsdk/src/fpdfxfa/fpdfxfa_app.cpp | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) (limited to 'fpdfsdk') diff --git a/fpdfsdk/src/fpdfxfa/fpdfxfa_app.cpp b/fpdfsdk/src/fpdfxfa/fpdfxfa_app.cpp index 0ff2ac7728..051dad2c95 100644 --- a/fpdfsdk/src/fpdfxfa/fpdfxfa_app.cpp +++ b/fpdfsdk/src/fpdfxfa/fpdfxfa_app.cpp @@ -207,7 +207,9 @@ void CPDFXFA_App::Response(CFX_WideString& wsAnswer, nLength = nLength > 2046 ? 2046 : nLength; pBuff[nLength] = 0; pBuff[nLength + 1] = 0; - wsAnswer = CFX_WideString::FromUTF16LE((unsigned short*)pBuff, nLength); + wsAnswer = CFX_WideString::FromUTF16LE( + reinterpret_cast(pBuff), + nLength / sizeof(unsigned short)); } delete[] pBuff; } -- cgit v1.2.3